This Privacy Policy explains how PARTYBOXRENT ("we", "us", "our") collects, uses, shares and protects personal data about you when you visit our website at www.partybox.rent, place an order with us, hire equipment from us, or otherwise interact with us. Please read this Policy carefully so that you understand your rights and how your personal data will be handled.
If you have any questions about this Policy or about how we handle your personal data, please contact us using the details in section 12.
1. Who we are
PARTYBOXRENT is a trading name of Andrew Legg, a sole trader whose office is at: Dorset Cottage, Tarrant Rushton, DT11 8SD, UK.
For the purposes of UK data protection law (including the UK General Data Protection Regulation and the Data Protection Act 2018), we are the "controller" of personal data we collect and process about you. This means we decide why and how your personal data is processed.
Our contact details are:
Email: hello@partybox.rent
Postal address: Dorset Cottage, Tarrant Rushton, DT11 8SD, UK
Phone: 07767 661594
2. The personal data we collect
The personal data we collect about you depends on how you interact with us. We have grouped it below into the categories of person to whom it relates.
2.1 Visitors to our website
When you visit www.partybox.rent we may collect:
- technical data, including your IP address, device type, browser type and version, operating system, and the pages you visit on our website;
- usage data, including how you interact with our website (such as pages viewed, time spent and links clicked); and
- cookies and similar tracking data, as set out in our Cookie Policy in section 14.
2.2 Customers placing an order
When you place an order with us (whether online, by phone or in person) we collect:
- identity data, including your full name and date of birth (where required);
- contact data, including your email address, postal address, billing address and phone number;
- order data, including details of the equipment hired, the hire period, delivery and collection arrangements, and any special requirements;
- payment data, including your payment card details (which are processed by our payment provider — see section 5) and the name and billing address associated with the card; and
- communications data, including any correspondence you send us or we send you in relation to your order.
2.3 Customers collecting or receiving Equipment
When you (or someone collecting or receiving Equipment on your behalf) take possession of hired Equipment, we collect:
- photographic copies of one form of government-issued photo identification (such as a driving licence or passport);
- photographic copies of the name & address section of a recent utility bill, council tax bill or bank or building society statement showing your name and address; and
- where appropriate, a photograph of the person collecting or receiving the Equipment.
This identification data is collected as a condition of releasing the Equipment, in accordance with our Standard Terms and Conditions for the Supply of Hire Equipment. We explain how we use and retain this data in section 4.
2.4 Marketing recipients
If you sign up to receive marketing communications from us, or have previously hired Equipment from us, we may collect your name, email address and your marketing preferences.
2.5 Personal data of third parties
If you provide us with personal data about another individual (for example, the person who will receive a delivery on your behalf), you must let that person know that you are providing their data to us and direct them to this Privacy Policy.
3. How and why we use your personal data
Under UK data protection law, we can only use your personal data if we have a lawful basis for doing so. The table below summarises why we use your data, and the lawful basis we rely on for each use.
3.1 To process and fulfil your order
- Purpose: to take and accept your Order, deliver the Equipment, collect it at the end of the Hire Period, take payment, issue invoices and provide customer service.
- Lawful basis: performance of a contract with you (or, where relevant, taking steps at your request before entering into a contract).
3.2 To verify your identity at the point of delivery or collection
- Purpose: to verify the identity of the person taking possession of our Equipment, to confirm that the person matches the cardholder who paid for the hire, and to deter fraud and unauthorised use of payment cards.
- Lawful basis: our legitimate interests in protecting our business from fraud, theft and non-return of high-value Equipment. We have considered your interests and rights and are satisfied that this processing is proportionate, necessary, and consistent with what you would reasonably expect.
3.3 To recover Equipment and pursue claims
- Purpose: to recover Equipment in the event of loss, theft or non-return; to defend payment card chargebacks and similar disputes; and to pursue or defend legal claims.
- Lawful basis: our legitimate interests in protecting our business and assets.
3.4 To run our website and improve our services
- Purpose: to operate, maintain and improve www.partybox.rent, to analyse how visitors use our site, and to keep our systems secure.
- Lawful basis: our legitimate interests in running and developing our business. For non-essential cookies, we rely on your consent (which you can withdraw at any time — see our Cookie Policy).
3.5 To send you marketing communications
- Purpose: to send you news, offers and information about our services that may be of interest to you.
- Lawful basis: your consent (where required) or our legitimate interest in marketing similar services to existing customers under the "soft opt-in" rule. You can opt out at any time by clicking the unsubscribe link in any marketing email or by contacting us.
3.6 To comply with legal obligations
- Purpose: to comply with our obligations under tax, accounting, consumer protection and other applicable laws.
- Lawful basis: compliance with our legal obligations.
4. Identification data — special note
Because of the high value of the Equipment we hire and the risk of theft, fraud and chargeback abuse, we collect and retain photographic copies of identification documents from each person taking possession of our Equipment. We treat this data with particular care and apply the following safeguards:
- Minimisation. We only collect what is necessary to verify identity and address. We do not record or retain account numbers, financial transaction details or other information visible on a utility bill or bank statement that is not relevant to identity verification.
- Purpose limitation. We use this data only for the purposes set out in section 3.2 and 3.3 above. We do not use it for marketing or share it for unrelated purposes.
- Retention. We retain identification data for one hundred and eighty (180) days following the end of the Hire Period, after which it is securely deleted. We retain the data for this period because it reflects the window within which a payment card chargeback may be raised by a cardholder. If we need to retain the data for longer in connection with an ongoing dispute, claim, investigation or legal obligation, we will only do so for as long as is necessary for that purpose.
- Security. Identification data is stored on access-controlled systems and is accessible only to those members of our team who need access in order to fulfil the purposes set out above.
- Right to object. Because we rely on legitimate interests for this processing, you have the right to object to it (see section 9). If you object, we may not be able to release Equipment to you.
5. Who we share your personal data with
We do not sell your personal data. We share it only with the following categories of recipient, and only to the extent necessary for the purposes described above:
- Payment providers. We use Stripe to process payments. Your payment card details are entered directly with our payment provider and are not stored by us. Our payment provider acts as a separate data controller in relation to your payment data; please see their privacy policy for further information.
- Delivery and logistics partners. Where we use a delivery or courier service, we share the minimum data necessary (such as name, delivery address and phone number) for them to deliver or collect Equipment.
- IT and software providers. We use third-party software and cloud services to host our website, manage bookings, store identification data and run our business. These providers act as our data processors and are bound by contract to handle your data only on our instructions and in accordance with applicable law.
- Professional advisers. Our accountants, auditors, lawyers and insurers, where required for the purposes of running our business or pursuing or defending claims.
- Law enforcement and regulators. Where we are required by law to disclose data, or where disclosure is necessary to investigate or prevent fraud, theft or other unlawful activity.
- Buyers of our business. If we sell or transfer all or part of our business, we may share your data with the prospective buyer, subject to appropriate confidentiality obligations.
6. International transfers
We use Google Workspace (provided by Google LLC and its affiliates) to store identification data and other business records. Google Workspace stores data in data centres located within the European Economic Area and, in some cases, the United States. This means that some of your personal data may be transferred outside the United Kingdom.
Where personal data is transferred to a country that has not been designated by the UK government as providing an adequate level of data protection, we rely on appropriate safeguards as required by UK data protection law. Specifically, our agreement with Google incorporates the UK Addendum to the EU Standard Contractual Clauses, which is a recognised transfer mechanism under UK GDPR.
Some of our other service providers (for example, our payment provider and website analytics provider) may also transfer your personal data outside the UK. In each case we rely on the same kind of safeguards: an adequacy regulation where one is in place, or the UK International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses.
If you would like further information about the transfers we make and the safeguards we apply, including a copy of the relevant contractual clauses, please contact us using the details in section 12.
7. How long we keep your personal data
We keep your personal data only for as long as is necessary for the purposes for which it was collected. The actual period varies depending on the type of data and the purpose.
- Order and contract data: for the duration of the contract and for six (6) years after its end, to comply with our tax, accounting and limitation-period obligations.
- Identification data: 180 days following the end of the Hire Period (see section 4).
- Marketing data: until you withdraw your consent or otherwise opt out, after which we keep a minimal record of your opt-out so that we know not to contact you again.
- Website analytics and cookie data: for the periods set out in our Cookie Policy.
- Correspondence and complaints: for up to six (6) years from the date of the last interaction, to enable us to respond to follow-up queries and defend legal claims.
8. How we keep your personal data secure
We take the security of your personal data seriously and have put in place appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure or destruction. These measures include access controls, encryption in transit, secure password practices and regular review of our systems.
No method of transmission over the internet or storage system is completely secure, however. Where we have given you (or where you have chosen) a password to access certain parts of our website, you are responsible for keeping that password confidential.
If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office as required by law.
9. Your rights
Under UK data protection law you have a number of rights in relation to your personal data. These include:
- The right to be informed about how we use your personal data (which is what this Policy provides).
- The right of access to a copy of the personal data we hold about you.
- The right to rectification of personal data that is inaccurate or incomplete.
- The right to erasure ("the right to be forgotten") of personal data we hold about you, in certain circumstances.
- The right to restrict processing of your personal data in certain circumstances.
- The right to data portability — to receive a copy of certain personal data in a structured, commonly used and machine-readable format.
- The right to object to processing of your personal data in certain circumstances, including where we rely on legitimate interests, and to object to direct marketing at any time.
- The right to withdraw consent at any time where we rely on your consent to process your personal data.
To exercise any of these rights, please contact us using the details in section 12. We will respond within one calendar month, although in complex cases we may extend this by up to two further months and will let you know if we need to.
There is no charge for exercising these rights, but we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.
10. Complaints to the ICO
If you are unhappy with how we have handled your personal data, please contact us first so that we have an opportunity to put things right. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk
11. Children
Our services are not directed at children under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can delete it.
12. How to contact us
If you have any questions about this Policy or wish to exercise any of your rights, please contact us:
Email: hello@partybox.rent
Postal address: Dorset Cottage, Tarrant Rushton, DT11 8SD, UK.
Phone: 07767 661594
13. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, in technology, or in the law. When we make material changes, we will update the version date at the top of this Policy and, where appropriate, notify you by email or by a prominent notice on our website. We encourage you to review this Policy periodically.
14. Cookies and similar technologies
Our website does not use any tracking, advertising or analytics cookies. We do not set any first-party cookies on www.partybox.rent.
The only client-side storage we use is a cart identifier (bqCartId) set in your browser's local storage by our booking provider, Booqable, when you add an item to your basket. This identifier is strictly necessary to operate the booking checkout — without it, the cart would not be able to remember the items you have added between pages. It is not used for tracking, advertising or analytics purposes, and it is not shared with any third party other than Booqable for the purpose of operating the checkout.
If you proceed to checkout, you will be taken to a Booqable-hosted page (shop.partybox.rent) where Booqable may set additional cookies and storage items necessary to process your order. Please refer to Booqable's own privacy and cookie information for details of how they handle data on their hosted pages.
If we add any analytics or tracking technologies to our website in the future, we will update this Policy and, where required by law, obtain your consent before any such technologies are activated on your device.
Version: May 2026